KVKK Privacy Notice

1. Scope

This notice is issued by Gökaydın Turizm ve Danışmanlık Ticaret Ltd. Şti., which trades as Bright Visa Company, under Article 10 of Turkey's Personal Data Protection Law No. 6698 (KVKK). It sets out which personal data we collect from you, why and on what legal basis we process it, and what rights you have.

It covers the personal data you share by filling in the application and contact forms on brightvize.com, or by reaching us through email, phone, WhatsApp or our social media accounts.

2. Data Controller

The data controller responsible for processing your personal data under the KVKK is:

• Company: Gökaydın Turizm ve Danışmanlık Ticaret Ltd. Şti.
• Address: Esentepe Mah. Talatpaşa Cad. No: 5/1 Şişli, İstanbul
• Email: brightvisacompany@gmail.com
• Phone: +90 545 655 58 24

3. Personal Data We Process

We process only the data we need in order to provide visa consultancy:

• Identity data: your first and last name.
• Contact data: your email address and phone number.
• Residence data: the province in Türkiye where you live.
• Travel and application preferences: your destination country, visa type and, if you have them, your planned departure and return dates.
• Your message: the free text you write to us in the form.
• Transaction security data: the IP address and browser information a request arrives with — for server logs and spam protection only.

The forms never ask for special categories of personal data (health, religion, biometric data and the like). When your application requires documents such as a passport or a bank statement, they are requested directly rather than through the forms.

4. Purposes of Processing

Your personal data is processed for these purposes only:

• Providing visa consultancy and carrying out the application process.
• Making the free preliminary assessment and identifying the visa type that fits your situation.
• Replying to your request, contacting you and keeping you informed throughout the process.
• Meeting our legal obligations and providing evidence in the event of a dispute.
• Keeping the site and its forms secure, and preventing abuse and spam.

5. Legal Basis

Your data is processed on the legal grounds listed in Article 5 of the KVKK:

• It is directly related to the conclusion or performance of a contract (Art. 5/2-c) — so that the consultancy can be provided.
• It is mandatory for the data controller to fulfil a legal obligation (Art. 5/2-ç).
• It is necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed (Art. 5/2-f) — for site and form security.
• For anything beyond these, and for transfers abroad, your explicit consent (Art. 5/1) — the consent checkboxes on the forms carry each of these separately.

6. How Data Is Collected

Your personal data is collected electronically, by wholly or partly automated means, through the application and contact forms on brightvize.com and through email, phone, WhatsApp and our social media accounts. Nothing you have not sent us yourself is collected from any other source.

7. Transfer of Personal Data

Your data is shared only as far as providing the service requires, and only with the following groups:

• Our service providers: the technology companies that host the site, deliver form notifications by email and keep the forms secure.
• The consulate, visa application centre or authorised intermediary of the destination country, where your application requires it — only at your request and with your knowledge.
• Public authorities and judicial bodies legally entitled to request it, to the extent the legislation requires.

Beyond this your data is not shared with third parties, and it is never sold or passed on for marketing.

8. Transfers Abroad

Some of the technology services the site depends on keep their servers outside Turkey, primarily in the United States. Data you send through the forms is therefore technically processed and stored on servers located abroad.

This transfer is made on the basis of your explicit consent under Article 9 of the KVKK. Every form carries a separate checkbox for the transfer abroad; ticking it means you consent to your personal data being transferred in this way.

• Vercel Inc. (USA) — hosting and serving the site.
• Resend, Inc. and Amazon Web Services (USA) — delivering form notifications by email.
• Cloudflare, Inc. (USA) — bot and spam protection for the forms.

If you would rather your data was not transferred abroad, reach us by phone (+90 545 655 58 24) or on WhatsApp instead of using the forms.

9. Retention Period

Your personal data is kept for as long as our consultancy relationship lasts and, once it ends, for the limitation and retention periods set out in the applicable legislation. Form submissions that do not turn into a consultancy relationship are kept only as long as it takes to assess your request and reply to you.

At the end of that period the data is deleted, destroyed or anonymised.

10. Your Rights as a Data Subject

Under Article 11 of the KVKK you may apply to the data controller and:

• Find out whether your personal data is being processed.
• Request information about it if it has been processed.
• Learn the purpose of the processing and whether the data is used accordingly.
• Know the third parties your data is transferred to, in Turkey or abroad.
• Ask for it to be corrected if it is incomplete or inaccurate.
• Ask for it to be erased or destroyed under the conditions of Article 7 of the KVKK.
• Ask that corrections, erasures and destructions be notified to the third parties your data was transferred to.
• Object to a result reached to your detriment purely through automated analysis.
• Claim compensation if you suffer loss because your data was processed unlawfully.

Where processing rests on explicit consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out beforehand.

11. How to Apply

You can send requests about your rights, together with information that identifies you, by email to brightvisacompany@gmail.com or in writing to Esentepe Mah. Talatpaşa Cad. No: 5/1 Şişli, İstanbul.

Depending on its nature, your request is answered free of charge as soon as possible and within thirty days at the latest; if answering it incurs a cost, the fee set by the Personal Data Protection Board may be charged. If your request is refused, you retain the right to complain to the Personal Data Protection Board.

12. Updates

This notice may be updated as legislation and our services change. The current version is always published on this page, and the date at the top shows when it was last updated.